User authentication using two-dimensional barcodes

Abstract

A login interface provided by a firmware setup utility is configured to display a two-dimensional barcode, such as a quick response (“QR”) code. The barcode is scanned by a mobile device configured to retrieve a timestamp encrypted within the barcode. The mobile device creates a passcode by re-encrypting the timestamp using a firmware setup password and a master key. The passcode is provided to the firmware setup utility, which retrieves the timestamp and compares it to a stored timestamp. If the timestamp values match, access to the firmware setup utility is permitted.

What is claimed is:  
     
       1. A computer-implemented method for securely authenticating a user for a setup utility, the method comprising computer-implemented operations for:
 scanning, from a mobile computing device, a two-dimensional barcode displayed by a computing system executing a firmware setup utility; 
 decoding, by the mobile computing device, the two-dimensional barcode to retrieve a timestamp encoded within the barcode; 
 creating a passcode, by the mobile computing device, by encrypting the timestamp using a firmware setup password; and 
 providing the passcode to the computing system to obtain access to the firmware setup utility if the timestamp matches a previously stored timestamp. 
 
     
     
       2. The computer-implemented method of  claim 1 , wherein the two-dimensional barcode is a visual representation of a token generated by encrypting the timestamp using information uniquely identifying the computing system. 
     
     
       3. The computer-implemented method of  claim 1 , wherein the two-dimensional barcode is a quick response (QR) code. 
     
     
       4. The computer-implemented method of  claim 1 , wherein decoding the two-dimensional barcode further comprises decrypting a token generated by encrypting the timestamp using information uniquely identifying the computing system. 
     
     
       5. The computer-implemented method of  claim 1 , wherein creating the passcode by encrypting the timestamp using the firmware setup password further comprises encrypting the timestamp using the firmware setup password and a master key. 
     
     
       6. The computer-implemented method of  claim 1 , wherein providing the passcode to the computing system further comprises providing the passcode to the computing system over a TCP/IP connection. 
     
     
       7. The computer-implemented method of  claim 1 , wherein the stored user password is synchronized from the computing system to the mobile computing device. 
     
     
       8. The computer-implemented method of  claim 1 , further comprising:
 determining whether a difference between a current time and the timestamp exceeds an authentication time limit; and 
 denying access to the firmware setup utility upon determining the difference between the current time and the timestamp does exceed the authentication time limit. 
 
     
     
       9. A system comprising:
 a computer, executing a firmware, the firmware comprising a firmware setup utility, the firmware setup utility configured to display a two-dimensional barcode; and 
 a mobile computing device configured to
 scan the two-dimensional barcode, 
 decode the two-dimensional barcode to retrieve a timestamp encoded within the two-dimensional barcode, 
 create a passcode by encrypting the timestamp using a firmware setup password, and 
 provide the passcode to the firmware setup utility, and 
 
 wherein the computer is further configured to
 receive the passcode created by the mobile computing device, 
 decrypt the passcode using the firmware setup password to retrieve the timestamp, 
 compare the retrieved timestamp to a stored timestamp, and 
 provide access to the firmware setup utility if the retrieved timestamp matches the stored timestamp. 
 
 
     
     
       10. The system of  claim 9 , wherein the two-dimensional barcode is a visual representation of a token generated by encrypting the timestamp using information uniquely identifying the computer. 
     
     
       11. The system of  claim 10 , wherein the two-dimensional barcode is a quick response (QR) code, and wherein decoding the two-dimensional barcode to retrieve the timestamp further comprises decrypting the token using the information uniquely identifying the computer. 
     
     
       12. The system of  claim 9 , wherein creating the passcode further comprises creating the passcode by encrypting the timestamp using the firmware setup password and a master key. 
     
     
       13. The system of  claim 9 , wherein decrypting the passcode using the firmware setup password to retrieve the timestamp further comprises retrieving data identifying permissions that control an ability of a user to boot the computing system. 
     
     
       14. The system of  claim 9 , wherein the firmware setup password was previously synchronized with the mobile computing device. 
     
     
       15. The system of  claim 9 , wherein the computer is further configured to determine whether a difference between a current time and the retrieved timestamp exceeds an authentication time limit. 
     
     
       16. The system of  claim 15 , wherein the computer is further configured to deny access to the firmware setup utility upon determining that the difference between the current time and the retrieved timestamp does exceed the authentication time limit. 
     
     
       17. The system of  claim 16 , wherein the computer is further configured to permit access to the firmware setup utility upon determining the retrieved timestamp matches the stored timestamp and the difference between the current time and the retrieved timestamp does not exceed the authentication time limit. 
     
     
       18. A non-transitory computer-readable storage medium,
 having computer-executable instructions stored thereupon which, when executed by a computer, cause the computer to: 
 create a token by encrypting a timestamp using information uniquely identifying a motherboard; 
 display a two-dimensional barcode generated from the token; 
 receive an encrypted passcode, generated by a mobile computing device, comprising the timestamp; 
 decrypt the passcode to retrieve the timestamp; and 
 upon determining that the retrieved timestamp matches a stored timestamp, allow access to the firmware setup utility. 
 
     
     
       19. The non-transitory computer-readable storage medium of  claim 18 , wherein decrypting the passcode to retrieve the timestamp further comprises decrypting the timestamp using a firmware setup password and a master key and wherein allowing access to the firmware setup utility further comprises determining that a difference between a current time and the retrieved timestamp does not exceed an authentication time limit. 
     
     
       20. The non-transitory computer-readable storage medium of  claim 18 , further comprising computer-executable instructions stored thereupon which, when executed by a computer, cause the computer to execute a firmware setup utility upon receiving an access request.